Privacy Policy
Last updated: 20 October 2026
1. Introduction and Scope
Our commitment to data protection
GreenLamp is committed to protecting personal data and respecting the privacy of everyone who visits our website, contacts our organisation, makes a donation or becomes a member.
We process personal data responsibly, transparently and in accordance with applicable data protection legislation.
GreenLamp is based in Switzerland. Our processing of personal data is therefore primarily governed by the Swiss Federal Act on Data Protection (FADP, also referred to as DSG) and its implementing regulations.
Our website is intended for an international audience, including individuals located in the European Union (EU) and the European Economic Area (EEA). Where our activities fall within the territorial scope of the European General Data Protection Regulation (GDPR), we also comply with its applicable requirements.
This Privacy Policy explains what personal data we process, why we process it, which service providers may receive it, how long we retain it and which rights you have under applicable data protection laws.
What is personal data?
Personal data means any information relating to an identified or identifiable natural person.
Examples include names, email addresses, postal addresses, telephone numbers, IP addresses, information submitted through contact forms and information relating to donations or membership payments.
Who does this Privacy Policy apply to?
This Privacy Policy applies to visitors to our website, individuals who contact GreenLamp, donors, individuals making membership payments and other persons whose personal data we process through our website.
Additional information may be provided separately where particular activities require more specific privacy notices.
2. Data Controller and Contact Information
Responsible organisation
The organisation responsible for the processing of personal data described in this Privacy Policy is:
GREENLAMP
c/o Haussmann Treuhand AG
Seefeldstrasse 45
8008 Zurich
Switzerland
Email:
Website: https://greenlamp.ch
If you have questions about the processing of your personal data or wish to exercise your privacy rights, please contact us using the details above.
3. Categories of Personal Data and Processing Purposes
Personal data we process
Depending on how you interact with our website and organisation, we may process the following categories of personal data:
- Identification data: First name, last name and, where applicable, organisation or company name.
- Contact data: Email address, telephone number and postal address.
- Communication data: Messages, enquiries and correspondence sent to GreenLamp.
- Donation and membership data: Donation amounts, currencies, transaction references, payment status, membership information and related administrative records.
- Technical data: IP address, browser type, operating system, access times and other technical information generated when using our website.
- Consent information: Preferences relating to cookies and external services.
- Other information: Additional details voluntarily provided through our contact or payment forms.
Sources of personal data
We primarily collect personal data directly from you when you contact us or interact with our services.
We may also receive personal data from third-party service providers involved in processing payments or delivering technical services, particularly Payrexx and participating payment providers.
Technical information may be collected automatically by our website infrastructure when you access our website.
Purposes of processing
We process personal data for the following purposes:
- Providing and maintaining our website.
- Ensuring website functionality, stability and security.
- Responding to contact requests and enquiries.
- Processing and administering donations.
- Managing membership contributions and related records.
- Issuing payment confirmations and, where applicable, donation certificates.
- Maintaining accounting and financial records.
- Managing cookie consent and external content.
- Complying with legal and regulatory obligations.
- Protecting our organisation and its services against misuse or unauthorised access.
We do not use personal data for unrelated purposes without an appropriate legal basis.
4. Legal Basis for Processing Personal Data
Processing under Swiss data protection law
As a Swiss organisation, GreenLamp processes personal data in accordance with the principles of the Swiss Federal Act on Data Protection.
These principles include lawfulness, good faith, transparency, proportionality, purpose limitation and appropriate data security.
Where processing requires justification under Swiss law, we rely on an applicable legal basis, the consent of the data subject where required, or an overriding private or public interest.
Our legitimate organisational interests include operating a secure website, communicating with supporters, administering donations and memberships, and carrying out our organisational activities.
Processing under the GDPR
Where the GDPR applies to our activities, we process personal data on the following legal bases, depending on the specific purpose:
Consent – Article 6(1)(a) GDPR
Where required, we obtain your consent before activating optional cookies, embedded third-party content or other processing activities for which consent is the appropriate legal basis.
You may withdraw your consent at any time with effect for the future.
Performance of a contract – Article 6(1)(b) GDPR
We may process personal data where necessary for the performance of a contract or for taking steps at your request before entering into a contract. This may include contractual membership arrangements and related administration.
Legal obligations – Article 6(1)(c) GDPR
We process personal data where necessary to comply with legal obligations applicable to GreenLamp, including relevant accounting and record-keeping requirements.
Legitimate interests – Article 6(1)(f) GDPR
We may process personal data where necessary for our legitimate interests, provided these interests are not overridden by your interests or fundamental rights and freedoms.
These interests include maintaining website security, handling general enquiries, administering donations and maintaining reliable organisational records.
When we rely on legitimate interests, we consider the necessity and proportionality of the processing and its potential impact on the individuals concerned.
Legal basis for donations
The processing of donation-related data is necessary for the administration of donations, the secure execution of payment transactions and the maintenance of appropriate financial records.
Where the GDPR applies, the relevant legal basis depends on the processing activity and may include Article 6(1)(b), Article 6(1)(c) or Article 6(1)(f) GDPR.
Where consent is required for loading an external service or using optional technologies, the relevant processing is based on consent under Article 6(1)(a) GDPR.
5. Website Hosting and Technical Data
Hosting provider
Our website is hosted by:
Infomaniak Network AG
Rue Eugène Marziano 25
1227 Les Acacias (Geneva)
Switzerland
Website: www.infomaniak.com
Infomaniak provides the technical infrastructure required to operate our website.
Server log files
When you access our website, certain technical information may be automatically collected and stored in server log files.
This information may include:
- IP address.
- Date and time of access.
- Requested pages and files.
- Browser type and version.
- Operating system.
- Referring website, where transmitted.
- Technical error information and security-related events.
This information is processed to deliver website content, identify technical problems, prevent misuse and maintain the security and reliability of our systems.
Where the GDPR applies, this processing is generally based on our legitimate interest in operating and protecting our website under Article 6(1)(f) GDPR.
Log files are retained in accordance with the applicable technical and security requirements and the retention practices of our hosting provider.
Data processing by our hosting provider
Our hosting provider processes personal data in connection with the provision of its services and, where acting as our processor, in accordance with applicable contractual and data protection obligations.
Further information is available in Infomaniak's Privacy Policy.
Secure data transmission
Our website uses HTTPS encryption to protect information transmitted between your browser and our website.
We implement appropriate technical and organisational measures intended to protect personal data against unauthorised access, accidental loss, alteration and misuse.
However, no method of transmission over the internet can guarantee absolute security.
6. Contact Forms and Communication
Contact forms
Our website provides contact forms through which visitors can contact GreenLamp.
We use the WordPress plugin Gravity Forms to manage these forms.
Depending on the individual form, we may collect:
- Your name.
- Your email address.
- Your telephone number, where requested or voluntarily provided.
- The subject and content of your message.
- Other information voluntarily submitted through the form.
We use this information to respond to your enquiry, provide requested information and manage the related correspondence.
Form submissions are processed through our WordPress website and may be stored in the website database.
Depending on the form configuration, an email notification may be sent to GreenLamp, and you may receive a confirmation message.
We do not use information submitted through contact forms for unrelated marketing activities without a valid legal basis.
Where the GDPR applies, processing is based on Article 6(1)(b) GDPR where your enquiry relates to a contractual or pre-contractual matter. For general enquiries, processing is generally based on our legitimate interest in responding to communications under Article 6(1)(f) GDPR.
Information submitted through contact forms is retained for as long as necessary to address your enquiry and fulfil any applicable legal obligations.
Communication by email or telephone
If you contact GreenLamp directly by email or telephone, we process the personal data you provide for the purpose of handling your request.
This may include your name, contact details, correspondence and any information you voluntarily share with us.
We retain this information for as long as necessary for the relevant communication, administrative purposes or legal obligations.
7. Donations and Membership Payments
Payment processing through Payrexx
GreenLamp uses Payrexx to process online donations and membership payments.
The service provider is:
Payrexx AG
Burgstrasse 20
3600 Thun
Switzerland
Website: www.payrexx.com
Integration of payment forms
Payrexx payment forms are embedded into our website using an external iframe.
The integration allows visitors to make donations and membership payments without GreenLamp operating its own payment processing infrastructure.
Our consent management system may initially block the embedded Payrexx content. When you choose to activate the payment form, your browser establishes a connection with Payrexx.
In this process, technical information such as your IP address, browser information and connection details may be transmitted to Payrexx.
Personal data processed during payments
Depending on the selected payment form and payment method, the following personal data may be processed:
- First and last name.
- Email address.
- Postal address and country, where requested.
- Donation or membership amount.
- Payment currency.
- Selected payment method.
- Information concerning additional members, where provided.
- Payment status and transaction reference.
- Information necessary to process and verify the payment.
The relevant information is entered directly into the Payrexx payment environment.
Payrexx and the financial service providers involved may process payment information required to complete the transaction.
GreenLamp does not operate its own credit card processing system and does not need to receive complete credit card details to administer donations or memberships.
Use of payment information by GreenLamp
GreenLamp may receive information about completed or attempted transactions, including donor details, membership information, payment amounts, currencies, transaction references and payment status.
We use this information to:
- Record donations and membership payments.
- Maintain donor and membership records.
- Confirm successful transactions.
- Respond to enquiries about payments.
- Issue donation confirmations or certificates where applicable.
- Maintain accounting and financial documentation.
- Comply with applicable legal obligations.
Personal data is retained only for as long as necessary for these purposes or as required by applicable law.
Third-party payment providers
Depending on the payment method you select, Payrexx may involve additional providers, including banks, card networks, digital wallet providers and other financial institutions.
These organisations may process personal and transaction data to execute payments, verify transactions, prevent fraud and comply with applicable financial regulations.
Their processing activities are also subject to their own applicable contractual and data protection provisions.
Depending on the payment method, data processing may take place in Switzerland, countries within the European Union or European Economic Area, or other countries involved in the international payment infrastructure.
Recurring membership payments
Where recurring membership payments are offered, Payrexx and the relevant payment providers may process information necessary to establish, manage and execute recurring transactions.
This may include membership information, payment references, transaction amounts, billing intervals and payment status.
GreenLamp uses the information made available to it for the administration of membership contributions and associated records.
Further information about Payrexx
Further information concerning the payment services provided by Payrexx is available in the following documents:
Payrexx Website Privacy Policy
Please note that Payrexx's website privacy policy primarily covers its corporate website. The processing of information within its payment services is subject to additional contractual and data protection provisions.
8. Cookies and Consent Management
Use of cookies
Our website uses cookies and similar technologies to provide essential functions and, where applicable, enable external services.
Cookies are small data files that may be stored on your device when you visit a website.
Some cookies are necessary for the technical operation of the website. Others may be used by external providers when you activate optional content or services.
Where required by applicable law, including relevant EU data protection and electronic privacy requirements, we request your consent before using non-essential cookies or similar technologies.
Technically necessary technologies may be used without consent where permitted by applicable law.
Consent management with Borlabs Cookie
We use Borlabs Cookie to manage consent for optional cookies and external content.
The software is provided by Borlabs GmbH, Germany.
Borlabs Cookie allows visitors to decide whether certain external services should be activated.
For this purpose, a technically necessary cookie named borlabs-cookie may be stored in your browser.
This cookie stores information about your consent preferences and technical information needed to manage them.
Such information may include:
- The consent preferences you have selected.
- Cookie and configuration versions.
- The domain and path of the website.
- The validity period of the cookie.
- A randomly generated identifier.
According to the provider, Borlabs Cookie does not automatically transmit visitor consent information to Borlabs.
Further information is available here:
Borlabs Cookie – Data Storage Information
Managing or withdrawing consent
You can review, modify or withdraw your consent for optional services at any time using the cookie settings available on our website.
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
You may also delete cookies through your browser settings. Please note that restricting technically necessary cookies may affect the functionality of the website.
Blocking external content
Some external services, including embedded videos and payment forms, may be blocked until you choose to activate them.
When an external service is activated, a connection to the respective provider may be established and technical information may be transmitted.
The provider may also use cookies or similar technologies in accordance with its own privacy practices and the applicable settings.
9. Embedded Videos and External Content
Vimeo
Our website includes videos hosted by:
Vimeo, Inc.
555 West 18th Street
New York, NY 10011
United States
We use Vimeo to present videos relating to GreenLamp's activities, projects and initiatives.
Where Vimeo content is blocked by our consent management system, the video is loaded only after you choose to activate it.
When you activate a Vimeo video, your browser establishes a connection to Vimeo's servers.
Vimeo may receive technical information including:
- Your IP address.
- Browser and device information.
- Information about the website page containing the video.
- Technical data relating to video playback.
Depending on the player configuration and your previous interactions with Vimeo, cookies or similar technologies may also be used.
Where Vimeo's Do Not Track setting is enabled, certain analytics and tracking functions are restricted. However, technically necessary cookies or existing browser cookies may still be involved.
Vimeo may process personal data in the United States and other locations where it or its service providers operate.
Where the GDPR applies, optional processing associated with activating embedded Vimeo content is based on consent under Article 6(1)(a) GDPR, where required.
Further information can be found in Vimeo's Privacy Policy:
https://vimeo.com/privacy
10. Disclosure of Personal Data to Third Parties
Categories of recipients
GreenLamp may disclose personal data to external organisations where necessary for the purposes described in this Privacy Policy or where required by law.
Recipients may include:
- Website hosting and technical infrastructure providers.
- Website development and maintenance service providers.
- Email and communication service providers.
- Payrexx and participating payment service providers.
- Banks, card networks and financial institutions.
- Professional advisers and service providers supporting accounting or administration.
- Competent public authorities where disclosure is legally required.
We take appropriate steps to ensure that service providers handling personal data on our behalf meet applicable data protection requirements.
Where required by the GDPR, we enter into appropriate data processing agreements with processors under Article 28 GDPR.
GreenLamp does not sell personal data to third parties.
11. International Transfers of Personal Data
International activities and data processing
GreenLamp is based in Switzerland and operates a website intended for an international audience.
Although important parts of our website and payment infrastructure are provided by Swiss companies, certain services may involve the processing or disclosure of personal data outside Switzerland.
This may include:
- Switzerland: Website hosting, organisational administration and services provided by Swiss-based providers.
- European Union and European Economic Area: Processing by certain technical service providers and financial institutions, depending on the services used.
- United States: Processing associated with externally hosted Vimeo content.
- Additional countries: Depending on the payment method selected, other countries may be involved in payment processing through the relevant financial service providers.
International transfers under Swiss law
Where personal data is disclosed abroad, we comply with the requirements of Articles 16 and 17 of the Swiss Federal Act on Data Protection.
Personal data may be transferred to countries recognised by the Swiss Federal Council as providing an adequate level of data protection.
Where an adequate level of protection is not recognised, we take appropriate steps to ensure that a lawful basis for the transfer exists.
Depending on the circumstances, this may include recognised contractual safeguards, such as standard data protection clauses, or a statutory exception permitted by Swiss law.
International transfers under the GDPR
Where the GDPR applies, transfers of personal data from the European Union or European Economic Area to countries outside the EU/EEA are subject to the requirements of Chapter V GDPR.
These transfers may be based on an adequacy decision under Article 45 GDPR, appropriate safeguards under Article 46 GDPR or an applicable exception under Article 49 GDPR.
Switzerland is recognised by the European Commission as providing an adequate level of protection for personal data transferred from the EU, subject to the applicable scope of that decision.
Where transfers to other countries require additional safeguards, these must be implemented as required by applicable law.
You may contact us at to request further information about relevant international transfers and applicable safeguards.
12. Data Retention and Deletion
General retention principles
GreenLamp retains personal data only for as long as necessary to fulfil the purposes for which it was collected or to comply with applicable legal obligations.
Retention periods depend on the nature of the personal data and the purpose of processing.
Contact enquiries
Information submitted through contact forms or direct communications is retained for as long as necessary to respond to the enquiry and manage related correspondence.
Longer retention may be necessary where a legitimate reason or legal obligation applies.
Donation and membership records
Information relating to donations and membership payments may be retained for accounting, administration and legal compliance purposes.
Where Swiss accounting legislation requires the retention of relevant business records, the applicable retention period is generally ten years.
Other records are retained only for as long as necessary for their respective purposes.
Technical data and consent preferences
Technical website data is retained in accordance with applicable operational and security requirements.
Cookie consent information is retained according to the settings of the consent management system and may be deleted or changed through the available controls or browser settings.
Deletion of personal data
When personal data is no longer required and no legal obligation or overriding lawful reason justifies its continued retention, we delete or anonymise the data as appropriate.
13. Your Rights Under Swiss Data Protection Law
Under the Swiss Federal Act on Data Protection, individuals have various rights regarding their personal data, subject to applicable legal conditions and exceptions.
Right of access
You may request information about whether GreenLamp processes personal data relating to you and, where applicable, obtain information about such processing in accordance with Article 25 FADP.
Right to rectification
If your personal data is inaccurate, you may request its correction in accordance with applicable law.
Right to deletion and protection against unlawful processing
You may request the deletion of personal data or other appropriate measures where processing is unlawful or no longer justified, subject to applicable legal conditions.
Such requests may be limited by statutory retention obligations or other lawful interests.
Right to data portability
Under the conditions of Article 28 FADP, you may request the release or transfer of certain personal data in a commonly used electronic format.
Withdrawal of consent
Where data processing is based on your consent, you may withdraw that consent with effect for the future.
Exercising your rights
To exercise your rights, please contact:
We may request reasonable proof of identity where necessary to protect personal data against unauthorised disclosure.
Swiss supervisory authority
The competent Swiss federal data protection supervisory authority is the Federal Data Protection and Information Commissioner (FDPIC).
Further information is available at:
14. Additional Rights Under the GDPR
Application of the GDPR
GreenLamp is established in Switzerland. However, the GDPR may also apply to certain processing activities involving individuals located in the European Union or European Economic Area.
This may particularly be the case where GreenLamp offers services or membership arrangements to individuals in the EU/EEA or monitors their behaviour within the meaning of Article 3 GDPR.
Where the GDPR applies, individuals have the following rights, subject to the applicable conditions and exceptions.
Right of access – Article 15 GDPR
You have the right to obtain confirmation of whether personal data concerning you is being processed and, where applicable, access to that data and additional information about its processing.
Right to rectification – Article 16 GDPR
You have the right to request the correction of inaccurate personal data and the completion of incomplete personal data where applicable.
Right to erasure – Article 17 GDPR
You may request the deletion of personal data concerning you where the applicable legal conditions are met.
The right to erasure may be subject to exceptions, including legal retention obligations.
Right to restriction of processing – Article 18 GDPR
You may request the restriction of processing in certain circumstances, for example while the accuracy of disputed personal data is being verified.
Right to data portability – Article 20 GDPR
Where the relevant conditions are met, you may request personal data you have provided to us in a structured, commonly used and machine-readable format and transmit it to another controller.
Right to object – Article 21 GDPR
Where personal data is processed on the basis of legitimate interests under Article 6(1)(f) GDPR, you may object to that processing on grounds relating to your particular situation.
If personal data is processed for direct marketing purposes, you have the right to object to such processing at any time.
Withdrawal of consent – Article 7(3) GDPR
Where processing is based on consent, you may withdraw your consent at any time.
The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Automated decision-making
GreenLamp does not use automated decision-making through its website that produces legal or similarly significant effects concerning visitors within the meaning of Article 22 GDPR.
External payment service providers may apply automated security or fraud prevention procedures in connection with payment transactions, subject to their own applicable legal responsibilities.
Right to lodge a complaint
Where the GDPR applies, you have the right to lodge a complaint with a competent data protection supervisory authority in the EU/EEA.
In particular, you may contact the supervisory authority in the country of your habitual residence, place of work or the place of an alleged infringement, where applicable.
Contact for GDPR requests
You may submit requests relating to your rights under the GDPR to:
We will respond to requests within the applicable statutory deadlines, generally within one month where Article 12 GDPR applies, subject to legally permitted extensions.
15. Data Security
GreenLamp takes appropriate technical and organisational measures to protect personal data against unauthorised access, misuse, alteration, accidental loss and unlawful disclosure.
These measures may include:
- Encrypted transmission of website data through HTTPS.
- Access restrictions for website administration.
- Security measures for user accounts and administrative access.
- Regular maintenance and security updates.
- Backup and recovery procedures.
- Use of specialised service providers for secure payment processing.
The specific security measures applied are reviewed and adapted as appropriate to the nature of the data and the risks involved.
Despite these precautions, absolute security cannot be guaranteed for any information transmitted over the internet.
16. Changes to This Privacy Policy
GreenLamp may update this Privacy Policy when necessary to reflect changes in our website, technical infrastructure, services, organisational activities or applicable data protection legislation.
The most recent version will be published on this website.
We recommend reviewing this Privacy Policy periodically to stay informed about how we process personal data.
17. Contact
If you have any questions about this Privacy Policy or the processing of your personal data, please contact:
GREENLAMP
c/o Haussmann Treuhand AG
Seefeldstrasse 45
8008 Zurich
Switzerland